$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/61574192E37A11EB8AF29A5BC4F9AE02.roa File: 61574192E37A11EB8AF29A5BC4F9AE02.roa (raw, json) Hash identifier: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc= Subject key identifier: C7:0A:87:58:C6:57:7A:91:F0:06:18:B4:C5:4C:0B:DE:60:50:1E:23 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 13C6 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/61574192E37A11EB8AF29A5BC4F9AE02.roa Signing time: Tue 24 Sep 2024 17:25:00 +0000 ROA not before: Tue 24 Sep 2024 17:25:00 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58868 IP address blocks: 103.118.32.0/23 maxlen: 24 103.241.148.0/24 maxlen: 24 2403:14c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5062 (0x13c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Sep 24 17:25:00 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f2f5ec-0c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:38:76:ef:2d:58:53:6f:ab:8d:17:99:ba: b8:1f:84:6b:a3:bd:90:92:98:d1:2a:3a:bb:91:79: 6c:da:02:0e:2b:41:9f:e1:60:27:9c:c6:92:82:31: 31:f2:e7:ad:7a:c5:8e:f2:f7:a9:31:18:4c:9b:57: 11:c2:45:31:56:46:f0:d0:b8:23:c5:23:1b:43:6f: 18:a3:7c:34:a3:37:70:47:fb:dc:9b:29:83:2c:1b: 3e:8b:30:6e:2a:00:6e:9c:78:90:e8:11:0f:f8:91: 31:0b:a7:46:30:94:15:78:33:c5:9b:77:ea:29:e6: 5e:c9:41:f5:2d:37:0b:c1:01:1b:2b:bb:ac:0f:b7: eb:ae:a7:bf:84:31:cc:7f:36:a0:18:3c:ce:b8:3e: 5c:42:37:89:36:e6:2e:9a:b1:58:3f:c4:2d:e2:c8: 5e:9f:18:82:b1:81:9a:c4:6c:ec:1a:e2:a3:e9:21: fe:c4:d5:fe:16:69:cb:86:87:20:7a:f0:b2:da:42: a9:47:15:bb:09:f8:eb:6c:21:29:ae:db:4a:54:39: 8a:d5:a1:ec:81:c5:0c:d7:1c:62:2e:29:dc:97:b8: 27:3e:60:a0:42:b8:e2:5d:9e:0b:2a:f8:f5:e0:5b: c9:6f:05:00:ae:27:16:b3:80:e1:15:68:69:51:98: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0A:87:58:C6:57:7A:91:F0:06:18:B4:C5:4C:0B:DE:60:50:1E:23 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/61574192E37A11EB8AF29A5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.32.0/23 103.241.148.0/24 IPv6: 2403:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:f5:6f:d9:d8:19:3f:2e:2b:08:1d:cb:d2:63:0c:65:29:da: ff:37:a8:20:80:1d:48:48:94:19:d6:19:dc:f9:b0:8f:02:e4: 4d:70:73:d1:22:f7:b8:bc:26:c3:04:fa:05:56:42:0e:0e:2a: 3b:04:31:18:de:6d:7c:7b:8f:65:06:04:99:70:82:14:19:c1: 94:59:f0:49:1f:a0:3b:3c:79:e6:75:1f:62:65:13:6e:27:7e: 08:7f:2a:0b:11:45:10:fa:d4:08:cb:17:41:78:5c:60:72:76: da:6b:34:9c:0f:f2:60:ec:71:d2:ca:4f:71:f0:c0:2f:f1:b9: b1:9a:c3:91:0e:c7:21:7e:69:d3:98:0a:99:a0:66:ca:06:a6: 13:0c:92:c8:98:8c:7f:5e:88:36:95:09:d6:48:92:c6:1a:20: f5:bd:46:73:2f:b1:0b:66:6b:2d:a1:97:32:ae:f3:0a:3f:6a: eb:69:57:a3:f4:30:38:f6:bf:57:3a:e9:a7:b2:c1:79:aa:76: 30:62:f8:42:d5:46:71:c1:7f:38:3f:24:de:5b:c6:38:8e:10: de:99:88:46:d4:31:ab:f0:c3:85:83:a3:23:ae:2e:e4:02:bb: b8:4c:29:14:f9:c1:8f:79:b4:2d:75:05:7e:f6:76:32:d1:c3: 81:5d:db:8c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICE8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjQwOTI0MTcyNTAwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYyZjVlYy0wYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjg4du8tWFNvq40Xmbq4H4Rro72QkpjRKjq7kXls2gIOK0Gf4WAnnMaSgjEx 8uetesWO8vepMRhMm1cRwkUxVkbw0LgjxSMbQ28Yo3w0ozdwR/vcmymDLBs+izBu KgBunHiQ6BEP+JExC6dGMJQVeDPFm3fqKeZeyUH1LTcLwQEbK7usD7frrqe/hDHM fzagGDzOuD5cQjeJNuYumrFYP8Qt4shenxiCsYGaxGzsGuKj6SH+xNX+FmnLhocg evCy2kKpRxW7CfjrbCEprttKVDmK1aHsgcUM1xxiLincl7gnPmCgQrjiXZ4LKvj1 4FvJbwUAricWs4DhFWhpUZj1GwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMcKh1jG V3qR8AYYtMVMC95gUB4jMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGNEYvMEZEQjk3NEM3NEQ3MTFFOEJDODJENDJDQzRGOUFFMDIvNjE1NzQxOTJF MzdBMTFFQjhBRjI5QTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFndiADBABn8ZQwDQQCAAIwBwMFACQDFMAwDQYJKoZIhvcN AQELBQADggEBACr1b9nYGT8uKwgdy9JjDGUp2v83qCCAHUhIlBnWGdz5sI8C5E1w c9Ei97i8JsME+gVWQg4OKjsEMRjebXx7j2UGBJlwghQZwZRZ8EkfoDs8eeZ1H2Jl E24nfgh/KgsRRRD61AjLF0F4XGBydtprNJwP8mDscdLKT3HwwC/xubGaw5EOxyF+ adOYCpmgZsoGphMMksiYjH9eiDaVCdZIksYaIPW9RnMvsQtmay2hlzKu8wo/autp V6P0MDj2v1c66aeywXmqdjBi+ELVRnHBfzg/JN5bxjiOEN6ZiEbUMavww4WDoyOu LuQCu7hMKRT5wY95tC11BX72djLRw4Fd24w= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org